COMP6838001 • CIRT DIGITAL INVESTIGATION

Computer Forensic

Digital Forensics & Incident Response (DFIR): Metodologi pengumpulan bukti digital berstandar ISO/IEC 27037, integritas rantai bukti (Chain of Custody), analisa artefak disk & RAM (Volatility), dan 10 investigasi studi kasus insiden siber.

📚 Pelajari Teori & Prosedur CoC 💼 10 Investigasi Kasus Nyata

🎯 Target Capaian UTS Computer Forensic

Fase DFIR NIST SP 800-86: Collection, Examination, Analysis, Reporting Prosedur Chain of Custody & Standar ISO/IEC 27037 (Evidence Integrity) Order of Volatility: CPU registers/cache → RAM → Disk → Removable media Teknik Bit-Stream Imaging (E01, RAW DD) & Verifikasi Hash (MD5, SHA-256) Analisis Memori RAM dengan Volatility 3 (pslist, malfind, netscan) Teknik Anti-Forensics: Timestomping, Data Hiding, Slack Space, Obfuscation

📚 Diktat Teori & Metodologi DFIR

Memahami kerangka kerja digital forensik, formulir Chain of Custody resmi, prinsip penanganan barang bukti (Write Blocker), analisis NTFS (MFT, $LogFile), dan aspek legal peradilan.

Buka Materi DFIR →

💼 10 Investigasi Studi Kasus Skenario UTS

10 skenario lengkap (Ransomware, Data Exfiltration, Insider Threat, Phishing, Web Hacking, SQLi, Crypto Theft, USB Stager, Email Forensics, Mobile Extraction) dengan metodologi response bertahap.

Buka 10 Studi Kasus →

🎯 Target Capaian UTS Computer Forensic

📚 Diktat Teori & Metodologi DFIR

💼 10 Investigasi Studi Kasus Skenario UTS

⚡ Kuis Interaktif Computer Forensic